CVE-2026-8223: Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send denial of service
A vulnerability was found in Open5GS up to 2.7.7. Affected by this vulnerability is the function pcfsesssbidiscoverandsend of the component sm-policies Endpoint. Performing a manipulation results in denial of service. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8223?
CVE-2026-8223 has been classified as a denial of service vulnerability.
How do I fix CVE-2026-8223?
To mitigate CVE-2026-8223, it is recommended to upgrade Open5GS to a version higher than 2.7.7.
What components are affected by CVE-2026-8223?
CVE-2026-8223 affects the sm-policies Endpoint, specifically the pcf_sess_sbi_discover_and_send function.
What versions of Open5GS are vulnerable to CVE-2026-8223?
Open5GS versions up to and including 2.7.7 are vulnerable to CVE-2026-8223.
What type of vulnerability is CVE-2026-8223?
CVE-2026-8223 is categorized as a denial of service vulnerability.